Viewing profile — cbaines

In terms of an asset being software that you're deploying, I don't get this attitute. If the process for producing the software is unreproducible, then you're running the risk that…

A while back, I worked on the code https://github.com/alphagov/info-frontend

Some analytics information is public, if you know where to look. You can add /info to the start of the URL path, and that might reveal some information about the page. For example:…

This having Google track your users has impacts internally when your own tooling becomes even less accurate because you have to start asking for consent: https://github.com/alphago…

Normally you'd just be using one glibc version. Packages that you installed a while ago may be using a different one, but it's not like every package has massively divergent depend…

No, you just update the package definition for A and release the updated package definitions, people will then be using the updated A, whether directly or through other packages (X…

Guix has packages, and packages have inputs (like dependencies), and you're right in that normally package definitions specify the exact dependencies it the code (they're hardcoded…

I used to think package managers and dependency resolvers were inseperable, I even did a little bit of work on the APT resolver. Since using GNU Guix though, I'm so glad it doesn't…

> I’ve seen Guix pop up a few times and I’m intrigued ... ostensibly a package manager but this article says it can work as an operating system in its own right. Can somebody expla…

Maybe it would be nice to have a wiki style page for this... anyway, I can only offer a perspective from the Guix side of things, but these are the reasons I'd personally be cautio…

I've heard about this from the Guix context: https://guix.gnu.org/blog/2018/bootstrapping-rust/